CVE-2025-14490CWE-749

CVE-2025-14490

High · published December 24, 2025

CVSS v3.0
7.8
EPSS
0%
Percentile
9.8
In the wild
Unconfirmed
What it is

⚡ A local attacker could easily climb the privilege ladder! This vulnerability in RealDefense SUPERAntiSpyware lets them execute code with SYSTEM privileges — that's like allowing a janitor to access the CEO's office! 🔥 Think of it as a poorly guarded access door in a building — once someone gets a basic key to enter, they might find a way to slip past security and access private offices without any alarms ringing. This flaw is that hidden door! If exploited, an attacker could run arbitrary code with SYSTEM-level rights, enabling them to alter files, install malware, or access sensitive data — truly a nightmare scenario for any affected system. The ramifications can range from data breaches to complete system compromises, leaving users vulnerable and exposed.

Put simply

Think of it as a poorly guarded access door in a building — once someone gets a basic key to enter, they might find a way to slip past security and access private offices without any alarms ringing. This flaw is that hidden door! This local privilege escalation vulnerability exists within the SAS Core Service due to an exposed dangerous function, allowing attackers with low-privileged access to escalate their permissions to SYSTEM level and execute arbitrary code.

What to do

If exploited, an attacker could run arbitrary code with SYSTEM-level rights, enabling them to alter files, install malware, or access sensitive data — truly a nightmare scenario for any affected system. The ramifications can range from data breaches to complete system compromises, leaving users vulnerable and exposed. To protect your system, update RealDefense SUPERAntiSpyware to the latest version immediately. It's also wise to review user permissions and regularly audit installed applications to minimize exposure to similar vulnerabilities. Don’t forget to monitor for unusual activity! You've got this! By following these steps, you'll strengthen your defenses in no time. 🛡️

The record
Technical detail
CVSS v3.0
7.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.8th percentile
Weakness
CWE-749 · Exposed Dangerous Method or Function
Published
2025-12-24T03:15Z
Affected products (1)
ProductVersionsFixed in
superantispyware/superantispyware< 10.0.128010.0.1280
References (1)
EPSS history
Timeline
  • 23 DEC 21:16Z
    RealDefense SUPERAntiSpyware Exposed Dangerous Function Local Privilege Escalation Vulnerability
    cvelistv5